
$ rpki-client -vvf rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/8C538C5AEFCF11F0889DE39E746F56BC.roa
File: 8C538C5AEFCF11F0889DE39E746F56BC.roa (raw, json)
Hash identifier: eiSYQZ4JbJxsufS9RcJajhzup1MJX6NMX/+qc2RSIq8=
Subject key identifier: B5:73:10:03:17:CB:9E:2C:0C:81:33:45:C4:D1:94:6D:D0:42:1A:2D
Certificate issuer: /CN=A91425C3/serialNumber=9EBDA123D9EE83094305A1180C2A08057FE5406A
Certificate serial: 7F
Authority key identifier: 9E:BD:A1:23:D9:EE:83:09:43:05:A1:18:0C:2A:08:05:7F:E5:40:6A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nr2hI9nugwlDBaEYDCoIBX_lQGo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/8C538C5AEFCF11F0889DE39E746F56BC.roa
Signing time: Sun 01 Mar 2026 11:20:41 +0000
ROA not before: Mon 12 Jan 2026 15:58:34 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 135413
IP address blocks: 165.101.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.crl
rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nr2hI9nugwlDBaEYDCoIBX_lQGo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:31:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127 (0x7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91425C3, serialNumber=9EBDA123D9EE83094305A1180C2A08057FE5406A
Validity
Not Before: Jan 12 15:58:34 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a42109-1148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fa:3e:08:06:ed:38:56:8f:5c:a6:63:7a:4d:
9a:97:0d:b3:70:56:ec:6e:48:e9:79:aa:1b:f2:5f:
72:69:dd:ae:85:f4:15:13:5b:b9:97:8d:4d:88:c8:
f8:3c:3c:a7:d7:58:4a:5e:52:02:03:1a:75:1e:5e:
b1:60:22:cd:e7:1c:d5:63:15:27:72:83:d7:e8:a5:
fc:8c:fb:72:3f:37:c7:cd:a4:75:8e:e9:8a:29:26:
79:fd:67:bc:70:e2:44:aa:c3:71:78:24:15:1c:51:
7a:49:fe:7d:9b:18:b5:79:5b:48:b0:da:64:7e:ad:
06:26:c0:95:2e:75:dc:36:13:f0:3a:06:a7:b0:36:
b0:9c:21:45:09:c7:c4:54:16:69:cb:d2:f7:6e:bf:
e0:d8:73:15:3e:0c:22:ed:70:59:06:ef:35:cd:d3:
ad:10:a4:79:bf:05:13:00:e8:76:24:81:b2:82:53:
16:a3:41:21:9d:74:25:b8:c4:d7:b1:f8:9c:e8:a1:
12:e1:22:f7:70:30:3f:41:94:7b:68:cd:3d:55:f5:
c4:88:ee:f4:bd:ab:b3:66:2e:87:c7:42:ae:1c:ff:
48:d1:c0:54:b4:38:76:b1:c8:28:e7:59:e0:5b:6f:
4f:1c:76:0c:aa:3e:c2:46:c1:bb:b8:2c:03:8c:20:
dd:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:73:10:03:17:CB:9E:2C:0C:81:33:45:C4:D1:94:6D:D0:42:1A:2D
X509v3 Authority Key Identifier:
keyid:9E:BD:A1:23:D9:EE:83:09:43:05:A1:18:0C:2A:08:05:7F:E5:40:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nr2hI9nugwlDBaEYDCoIBX_lQGo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/8C538C5AEFCF11F0889DE39E746F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
165.101.239.0/24
Signature Algorithm: sha256WithRSAEncryption
23:08:20:52:bd:c4:0b:eb:ec:e6:66:f9:4c:af:2b:42:50:86:
71:17:ff:ad:3d:7f:b7:a1:8e:64:53:c1:e2:b4:9e:12:c1:7e:
42:c1:f5:5e:47:8a:56:2c:af:f5:45:b0:b3:0f:96:88:fd:e8:
2a:34:4e:e6:8b:72:6c:06:39:99:20:46:a9:10:00:0e:18:82:
5a:f2:ef:47:d1:d3:b5:d0:9c:67:29:9e:89:0a:65:70:4b:ec:
ec:8f:6a:17:86:a3:7a:a6:b1:98:ab:ea:a0:31:0a:a8:9e:b0:
09:f4:0e:a9:fd:6f:88:21:a7:84:74:91:d7:1a:32:0c:0d:0b:
87:f1:77:89:0d:d9:d4:9f:d4:11:a2:ec:c1:a7:f2:04:48:cc:
cc:8e:69:00:50:48:e6:2a:90:7b:77:f4:1b:e2:8e:4a:18:b9:
a5:cf:c6:05:9b:25:e0:47:26:6b:a8:d5:85:fd:b2:17:61:ae:
63:df:e4:13:8b:ea:f1:db:f7:50:7a:83:20:24:26:b3:81:ea:
f8:d3:5c:ec:5d:5f:9e:0c:e9:c4:7d:76:6b:98:04:bf:51:0b:
d3:45:9a:d0:f9:f6:aa:bc:7f:ee:97:86:d3:f9:5f:7f:45:3e:
24:a8:25:be:a2:60:b0:1a:cd:23:af:cb:4d:75:b2:d3:47:cc:
00:f2:42:16
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:15:03 2026 by rpki-client